Monitoring VPN traffic

[Denda]

I need to know of some way or application that I can monitor exactly what each remote user is doing on the network once they log into the VPN.

We use Novell Bordermgr Radius, Checkpoint NG. I can see when someone is authenticated via the checkpoint logs and the radius logs, however, from there I can't tell what they are actually doing on the network.

Does anyone know how to accomplish this either with what I have in place now, adding something or replacing it? Thanks a ton.

 

[lgarner]

You could enable Netflow if your router supports it, or try putting a server running Ntop where it can see traffic to & from the Checkpoint.

 

[Denda]

We do have a CISCO router, so I'll take a look at the netflow. Thank you.